[SECURITY] Fedora 25 Update: varnish-5.0.0-5.fc25

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2017-8575fbfe90
2017-11-28 02:48:23.155289
--------------------------------------------------------------------------------

Name        : varnish
Product     : Fedora 25
Version     : 5.0.0
Release     : 5.fc25
URL         : http://www.varnish-cache.org/
Summary     : High-performance HTTP accelerator
Description :
This is Varnish Cache, a high-performance HTTP accelerator.

Varnish Cache stores web pages in memory so web servers don't have to
create the same web page over and over again. Varnish Cache serves
pages much faster than any application server; giving the website a
significant speed up.

Documentation wiki and additional information about Varnish Cache is
available on: https://www.varnish-cache.org/

--------------------------------------------------------------------------------
Update Information:

Security fix for CVE-2017-8807: This fixes a possible data leak in stevedore
transient objects in varnishd.  Upstream reports: "It is not inconceiveable that
an attack can provoke this situation on vulnerable varnishd instances, where the
leaked memory contains confidential data and therefore we have classified this
as a security vulnerability."
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1513523 - CVE-2017-8807 varnish: Data leak - ���-sfile��� Stevedore transient
objects
        https://bugzilla.redhat.com/show_bug.cgi?id=1513523
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade varnish' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------